PT-2021-24422
تاريخ النشر
2021-05-21
·
تاريخ التحديث
2021-05-21
الوصف من
الدرجة
N/A
غير متوفرلا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
Name of the Vulnerable Software and Affected Versions:
tableflip versions prior to 1.2.2
Description:
The issue affects processes using tableflip, potentially causing hung goroutines in the parent process after a failed upgrade. This occurs due to the Go runtime's behavior with O NONBLOCK, specifically when
exec.Cmd.Start() is called, leading to the disabling of the runtime poller and the clearing of O NONBLOCK from the underlying file descriptor. As a result, goroutines relying on deadlines or interruption via Close() may become stuck in read or accept-like syscalls. Although this problem is considered rare and has not been experienced in production, it can still cause issues.Recommendations:
For versions prior to 1.2.2, update to version 1.2.2 to resolve the issue.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾